General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
asyncrat
Version
0.5.7B
Botnet
Default
C2
wzt5xcg.localto.net:1604
wzt5xcg.localto.net:5274
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_file
KYGOClient.exe
-
install_folder
%AppData%
aes.plain
Targets
-
-
Asyncrat family
-
Async RAT payload
-
Downloads MZ/PE file
-
Patched UPX-packed file
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
-
Executes dropped EXE